<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>I'm setting up apiman with Keycloak and have a question that the folks on the apiman user list suggested I ask here.</div>
<div><br>
</div>
<div>In the Wildfly configuration for apiman, I see several entries like this (one for each war file):</div>
<div><br>
</div>
<div>
<div> <kc:secure-deployment xmlns:kc="urn:jboss:domain:keycloak:1.0" name="apiman.war"></div>
<div> <kc:realm>apiman</kc:realm></div>
<div> <kc:resource>apiman</kc:resource></div>
<div> <kc:credential name="secret">password</kc:credential></div>
</div>
<div><br>
</div>
<div>I'm noticing that they fill in the word "password" here, but in their instructions they don't specify to replace it with a particular password. My guess is that this credential is used only for applications that request REST Direct Access Grants, and that
since apiman doesn't do that, they can use a dummy password in this configuration.</div>
<div><br>
</div>
<div>Is it correct that this credential is used only for Direct Access Grants?</div>
<div><br>
</div>
</body>
</html>